Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2264839AC38811EFA0D4BB7A762E951A.roa
File: 2264839AC38811EFA0D4BB7A762E951A.roa (raw, json)
Hash identifier: Mp6klkiYBxroED9HQoUcpeMspNOCUUr++zaHxlEFNzU=
Subject key identifier: F6:2E:4B:63:28:B9:29:7A:A5:54:6A:68:95:37:4C:4B:A1:D6:27:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: EC89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2264839AC38811EFA0D4BB7A762E951A.roa
Signing time: Thu 26 Dec 2024 12:51:33 +0000
ROA not before: Thu 26 Dec 2024 12:51:30 +0000
ROA not after: Fri 12 Dec 2025 12:51:30 +0000
asID: 984
IP address blocks: 45.196.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Feb 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60553 (0xec89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Dec 26 12:51:30 2024 GMT
Not After : Dec 12 12:51:30 2025 GMT
Subject: CN=676d5155-9ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:6b:6f:aa:72:cc:f2:97:98:c6:99:80:a6:
79:47:77:39:9b:31:58:a0:68:83:7a:e0:a9:c8:34:
5d:94:d1:db:5a:4b:f7:2a:72:77:24:d0:f0:b1:31:
77:59:98:06:82:40:47:82:c5:ea:c3:af:00:7b:52:
ef:6f:bc:ed:ec:86:c5:98:3a:c9:cf:e2:57:5a:4a:
2e:77:ac:3f:25:41:8e:7d:b7:a4:22:56:75:e9:63:
df:10:ea:c6:56:ad:9a:df:6e:03:17:05:8a:b2:4f:
5c:23:34:05:f5:aa:5c:5c:fd:00:9d:1f:ef:86:f0:
35:1d:1d:37:51:a7:5a:e0:17:4e:b1:d3:03:8e:c5:
ff:7b:08:db:2e:1b:bd:f0:33:cc:17:a0:3e:00:36:
d5:ed:ec:80:1b:71:36:ff:96:97:da:88:30:9b:1a:
66:b2:36:85:3a:3e:ad:f4:b5:18:f2:fc:bb:e4:f9:
3c:ca:34:43:e7:41:6b:f4:08:31:fb:b8:e0:5d:82:
eb:3b:f7:f5:8a:58:0a:e5:51:67:a2:d1:a8:3d:26:
47:58:52:7f:ed:6f:a9:99:f4:6c:e1:34:1c:9f:cf:
c9:78:19:44:1a:83:ec:17:e7:6c:b6:d0:c3:f0:7d:
09:de:3e:5d:b4:ab:66:ce:67:72:b6:a5:43:7d:49:
48:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2E:4B:63:28:B9:29:7A:A5:54:6A:68:95:37:4C:4B:A1:D6:27:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2264839AC38811EFA0D4BB7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.31.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:49:d4:a4:cb:ec:a4:9d:c8:b3:5a:fd:41:97:b9:8c:d6:26:
af:37:cf:04:05:91:95:5f:a1:96:ba:83:0c:7e:d0:a3:77:6a:
2d:09:31:a6:63:3e:27:d7:d2:7c:5f:c1:86:63:70:3b:51:2a:
9f:4f:aa:43:9a:c1:b9:3c:89:34:2d:1d:28:cb:34:c3:fb:6e:
b2:75:00:8c:02:ce:29:c4:7a:33:f7:3b:26:3e:3f:84:62:22:
d8:e7:cc:38:d6:ad:29:c9:84:fe:84:fd:78:e5:8c:d5:f7:26:
9e:1c:68:4f:2f:ff:00:14:56:0f:1c:01:30:8f:5b:ba:e5:3f:
5a:df:9b:ef:81:ba:ee:ef:61:de:c7:63:04:ef:4d:68:98:f6:
38:1a:22:1a:4d:ef:5a:ce:28:af:38:d4:60:4e:90:9e:2c:39:
c1:1f:6b:0b:ee:d0:98:ca:66:52:6f:48:85:63:4a:6a:82:5e:
4b:64:0f:69:06:f0:7d:a5:14:cd:a7:62:44:09:ea:ff:0f:2f:
90:28:5f:d4:99:b3:de:ae:a8:64:ef:4d:d9:65:8a:d5:f5:f5:
85:55:cd:5a:ce:85:7e:2a:73:ee:05:84:0f:17:8f:eb:6f:08:
94:de:76:66:8d:fa:48:e7:21:2d:6f:03:57:fb:d3:8a:37:20:
53:0c:37:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:52:40 2025 by rpki-client